| View previous topic :: View next topic |
| Author |
Message |
webhelper
SWW Expert
Joined: 11 Apr 2004
Last Visit: 16 Jul 2011
Posts: 1090
|
 Posted: Sun Jul 11, 2004 8:05 pm Post subject: greg-search.com and dedmazai CWS Public Enemy #1 |
 |
|
greg-search.com and dedmazai CWS Public Enemy #1
Ok, hit the jackpot and have their scripts on how they overwrite the wmplayer and notepad thru their exploits.
http://www.webhelper4u.com/CWS/greg-search/index.html
These guys are going to take a week or to just to go thru all the sites they have their exploit links at. There exploit will overwrite both the wmplayer and the notepad.exe. And it is by dropping an executable file that has been renamed with a jpg extension to bypass most security. Script even searches with code that covers most wmplayer locations making it International in nature.
_________________
Wächter der Geschichten:
http://www.webhelper4u.com/thewatcher.html
Member of ASAP Since 2004 |
|
| Back to top |
|
 |
wawadave
Warrior Obsessed
Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum
|
|
| Back to top |
|
|
webhelper
SWW Expert
Joined: 11 Apr 2004
Last Visit: 16 Jul 2011
Posts: 1090
|
|
| Back to top |
|
|
Moore
Moderator
Joined: 31 May 2004
Last Visit: 05 Jan 2011
Posts: 758
Location: °°.MooreLand.°°
|
|
| Back to top |
|
|
wawadave
Warrior Obsessed
Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum
|
|
| Back to top |
|
|
Doug Taylor
Warrior
Joined: 04 Jun 2004
Last Visit: 27 Nov 2010
Posts: 127
Location: Sonoma County California
|
| Posted: Mon Jul 12, 2004 10:30 pm Post subject: |
|
|
Hi webhelper,
THANK YOU! I have a question! Could the exploit that affects notepad prevent a HijackThis log from (I gotta get rid of this keyboard!) displaying? I ask because I’ve been helping bounce over at CC with a win.ini problem. Got that cleared up and asked her to post a HijackThis log to the forum, she can save it, but it will not show on her PC. Right after she saves the log it would flash on the screen and disappear. I had her email me her log to see if I could open it, I could. So, I pasted into a reply back to her and she has posted it to CC. It has NDrv.dll in it. Could greg-search cause the failure to display. I will add that after we got her win.ini file she was able to install Panda and scan her system for viruses (she couldn’t do before) and found 6. I have been under the impression that one of the viruses damaged her notepad. Perhaps I am wrong to think this.
With our Lord’s blessings,
Doug |
|
| Back to top |
|
|
webhelper
SWW Expert
Joined: 11 Apr 2004
Last Visit: 16 Jul 2011
Posts: 1090
|
| Posted: Tue Jul 13, 2004 6:12 am Post subject: |
|
|
| Doug Taylor wrote: |
Hi webhelper,
THANK YOU! I have a question! Could the exploit that affects notepad prevent a HijackThis log from (I gotta get rid of this keyboard!) displaying? I ask because I’ve been helping bounce over at CC with a win.ini problem. Got that cleared up and asked her to post a HijackThis log to the forum, she can save it, but it will not show on her PC. Right after she saves the log it would flash on the screen and disappear. I had her email me her log to see if I could open it, I could. So, I pasted into a reply back to her and she has posted it to CC. It has NDrv.dll in it. Could greg-search cause the failure to display. I will add that after we got her win.ini file she was able to install Panda and scan her system for viruses (she couldn’t do before) and found 6. I have been under the impression that one of the viruses damaged her notepad. Perhaps I am wrong to think this.
With our Lord’s blessings,
Doug |
ANSWER IS : YES
_________________
Wächter der Geschichten:
http://www.webhelper4u.com/thewatcher.html
Member of ASAP Since 2004 |
|
| Back to top |
|
|
wawadave
Warrior Obsessed
Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum
|
|
| Back to top |
|
|
|
